Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: 8WM6BPPSFh+O6pf0IbXfqOIcKvtWKqCBPV1hVUHR1ZU=
Subject key identifier: AE:5A:F3:5D:00:F9:55:F2:EE:5F:37:DD:DC:7E:A2:E4:70:DC:17:06
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 0196832345EE774EB01C1F712C612067FBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 20:00:48 +0000
Manifest this update: Tue 29 Apr 2025 20:00:48 +0000
Manifest next update: Wed 30 Apr 2025 20:00:48 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: SjWuYSACZ1sA0rsI6DqcLvgdOkNv9PgRIBBFFhT09Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:45:ee:77:4e:b0:1c:1f:71:2c:61:20:67:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Apr 29 20:00:48 2025 GMT
Not After : Apr 30 20:00:48 2025 GMT
Subject: CN=ae5af35d00f955f2ee5f37dddc7ea2e470dc1706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:02:ee:0a:5f:9f:ce:3f:f1:8e:8d:64:37:a8:
0a:20:e7:da:6d:37:1e:2a:bc:69:e7:0b:e5:51:7c:
25:01:59:f6:76:74:a5:5f:20:5e:bd:40:c6:ab:4f:
aa:d6:50:15:8e:c1:89:07:ff:f0:e4:69:7a:36:61:
e4:17:0f:5c:9a:5b:65:fa:33:7c:c8:51:d7:52:3d:
5c:ec:70:1c:ba:05:01:4d:c3:c5:86:e1:dd:55:74:
16:fe:61:17:c4:1a:ee:76:2b:21:65:d7:0a:02:ef:
97:d4:68:d4:c1:73:eb:02:3f:36:57:f2:01:f8:42:
75:41:3d:54:96:9f:cd:4a:03:95:2d:2c:17:0f:d7:
33:41:bb:8b:08:3d:62:d2:38:34:16:b1:ce:44:53:
23:8c:4a:4e:27:23:d3:f0:09:8f:b7:b9:4f:2e:60:
bd:4e:30:33:c5:28:6c:f3:e4:9f:46:93:70:ac:ac:
01:d5:b1:c6:46:57:cd:ff:c4:28:73:4e:aa:18:89:
19:d9:0d:19:6d:99:4b:d0:d4:43:67:c9:b7:9e:73:
ff:e8:a1:de:97:e1:a4:37:14:d4:32:f2:4b:85:a0:
74:1e:6b:0b:ff:3c:38:48:c3:51:63:47:f7:8f:dd:
0f:de:88:2f:53:ae:22:cc:9d:77:eb:f1:12:2a:b7:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:F3:5D:00:F9:55:F2:EE:5F:37:DD:DC:7E:A2:E4:70:DC:17:06
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:3b:74:5e:6a:2d:ee:fb:d6:b3:c4:bc:7d:ef:f8:67:08:
ee:cd:19:b2:61:a5:6f:94:af:00:e2:c5:ca:61:96:d9:e5:7d:
23:95:7f:cf:6b:af:b7:dc:cf:5b:21:b6:89:4e:e9:4c:1e:e1:
08:a7:ba:18:23:13:28:f9:15:a3:86:4c:dd:5e:f0:d8:f2:ed:
0c:0b:89:12:91:da:f5:ea:b7:c8:da:1d:e5:11:85:46:08:0e:
11:9f:39:00:1e:b7:ac:63:94:cc:bf:ac:33:f9:0d:11:02:40:
41:62:b5:37:bb:4a:e3:71:eb:ab:02:e3:91:97:82:f8:f7:a8:
15:d3:13:5e:26:be:e7:99:12:20:d3:1e:97:51:14:62:33:0a:
f2:7e:e7:66:a1:e9:7c:f3:96:5b:0f:4e:03:4f:b5:a1:7d:f7:
de:f7:7c:8a:34:d7:e9:f5:78:82:75:3c:67:1a:03:73:70:99:
81:d4:22:47:fa:27:2d:6a:4a:a9:3e:92:a0:c8:b8:01:03:dd:
06:d8:ce:76:ab:c0:94:49:ad:40:c7:56:6e:eb:95:a3:ef:d2:
af:b7:bd:fa:60:a0:ec:bc:44:20:34:d1:04:a0:84:63:82:ee:
ff:4a:21:a1:27:f2:11:60:17:3c:07:35:0c:5f:a0:46:da:33:
b7:ec:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:11:24 2025 by rpki-client